Android Question avast antivirus: all app deveolped with B4A result infected HiddenAds-DB

Fabio Campanella

Member
Licensed User
Hello everyone. For a few days, all the APPs developed with B4A have become infected with the virus in question. Even if I always recompile the APP this problem. Yesterday I published an update on the Google Play Store but I didn't get any reports from google.
Are they false positives?
How do I tell my customers they should ignore this report? Is there a solution to the problem?
Thanks at all!!

Fabio
 

Fabio Campanella

Member
Licensed User
1. Not needed but not relevant.
2. So just ignore that warning during detection or uninstall the overaggressive anti-virus.
Yes Erel, the problem is that it occurs on some of my customers as well as on my mobile phone. How do I tell my client to uninstall the antivirus? : (... oh well ... I try to communicate to avast antivirus staff each of my APP and that they are false positives. Thanks anyway for your support.
 

Dmitriy

New Member
Same problem. Players in my game write about this in reviews on Google Play. They also write in support of Google Play, and Google recommends removing the application.
 

Erel

Administrator
Staff member
Licensed User
Let me say it clearly, there are no hidden ads (or anything else hidden) in your projects.

Players in my game write about this in reviews on Google Play. They also write in support of Google Play, and Google recommends removing the application.
Can you post a link to your app? Are you using your own private sign key?
 

Filippo

Expert
Licensed User
How do I tell my client to uninstall the antivirus?
Tell all your customers that it is not necessary to have an antivirus on an Android smartphone.
The harm is greater than the benefits.
 

Alvsky

Member
Licensed User
Hi all
I was just about to go write the same question and I found this thread.

So I am having the same problem. Avast and AVG recognizes the app as a threat.

This usually happens to all users with Huawei and Xiaomi devices as they have Avast as integrated AV program.

1585647040936.png


Problem is that users get the warning all the time and eventually has to remove the app.

I also use my private sign key and the app was downloaded from Google Play

This actually happened these days since I tested an old version of my app and it's also "infected"
 

Pendrush

Well-Known Member
Licensed User
Same virus alert is shown on Huawei and Xiaomi devices, this lead to mass app uninstall and one star rating on play store.
All my B4a apps are affected.
 

marcick

Well-Known Member
Licensed User
Virus total detect something on my apk.
I'm not showing any ads and yes, I'm using firebase for notifcations.

Cattura.PNG
 

Alex_197

Active Member
Licensed User
I might be mistaken but it looks like China and the USA war. So Chinese cell phones will not recognize (or make you uninstall) and apps from the Google play market.
 

marcick

Well-Known Member
Licensed User
I have tested with VirusTotal an older version of my app and it doesn't report the HiddenAds infection.
So I have continued to upload all the newer versions to see where this issue start and it is between version 2.07 to 2.08.
In the code there is just a bug fix in 2.08, but looking to AndroidManifest.xml I see a difference:

This is 2.07 without infection

B4X:
         <service android:name="com.google.firebase.components.ComponentDiscoveryService" >
                    <meta-data
                        android:name="com.google.firebase.components:com.google.firebase.analytics.connector.internal.AnalyticsConnectorRegistrar"
                        android:value="com.google.firebase.components.ComponentRegistrar" />
                     <meta-data
                        android:name="com.google.firebase.components:com.google.firebase.iid.Registrar"
                        android:value="com.google.firebase.components.ComponentRegistrar" />
        </service>
and this is 2.08 with infection

B4X:
 <service android:name="com.google.firebase.components.ComponentDiscoveryService" >
                    <meta-data
                        android:name="com.google.firebase.components:com.google.firebase.analytics.connector.internal.AnalyticsConnectorRegistrar"
                        android:value="com.google.firebase.components.ComponentRegistrar" />
                     <meta-data
                        android:name="com.google.firebase.components:com.google.firebase.iid.Registrar"
                        android:value="com.google.firebase.components.ComponentRegistrar" />
                     <meta-data
                        android:name="com.google.firebase.components:com.google.firebase.auth.FirebaseAuthRegistrar"
                        android:value="com.google.firebase.components.ComponentRegistrar" />
        </service>
The text in the Manifest editor is identical between the two versions.
I don't know if this can be of interest to experts.

Edit: vs 2.07 was compiled on 29 Jun 2018, while 2.08 on 02 Nov 2018. Probably with some different library version or B4A version
 
Last edited:
Top